74.231.234.120

基本信息:

城市(city): Leesville

省份(region): Louisiana

国家(country): United States

运营商(isp): Vernon Parish School Board - LFT LAN

主机名(hostname): unknown

机构(organization): AT&T Corp.

使用类型(Usage Type): University/College/School

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	3389/tcp 3389/tcp 3389/tcp [2019-07-02]3pkt	2019-07-03 03:37:56

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.231.234.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28027
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;74.231.234.120.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070201 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 03 03:37:49 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 120.234.231.74.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 120.234.231.74.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
158.69.194.115	attackspambots	Jul 18 16:29:14 areeb-Workstation sshd\[31420\]: Invalid user testuser from 158.69.194.115 Jul 18 16:29:14 areeb-Workstation sshd\[31420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.194.115 Jul 18 16:29:16 areeb-Workstation sshd\[31420\]: Failed password for invalid user testuser from 158.69.194.115 port 48703 ssh2 ...	2019-07-18 19:09:33
37.114.172.24	attackbotsspam	Jul 18 03:12:46 mail sshd\[19121\]: Invalid user admin from 37.114.172.24 Jul 18 03:12:46 mail sshd\[19121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.114.172.24 Jul 18 03:12:48 mail sshd\[19121\]: Failed password for invalid user admin from 37.114.172.24 port 33376 ssh2	2019-07-18 18:52:50
164.132.57.16	attack	Automatic report - Banned IP Access	2019-07-18 18:58:25
104.206.128.6	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-18 19:32:14
62.33.157.20	attack	[portscan] Port scan	2019-07-18 18:50:47
202.98.213.216	attackspam	Jul 18 13:56:19 server sshd\[11400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.98.213.216 Jul 18 13:56:22 server sshd\[11400\]: Failed password for invalid user bas from 202.98.213.216 port 12733 ssh2 Jul 18 13:59:14 server sshd\[19465\]: Invalid user helen from 202.98.213.216 port 15966 Jul 18 13:59:14 server sshd\[19465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.98.213.216 Jul 18 13:59:17 server sshd\[19465\]: Failed password for invalid user helen from 202.98.213.216 port 15966 ssh2	2019-07-18 19:10:23
54.39.145.59	attackbotsspam	Jul 18 13:59:50 microserver sshd[60442]: Invalid user marcelo from 54.39.145.59 port 43836 Jul 18 13:59:50 microserver sshd[60442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.145.59 Jul 18 13:59:53 microserver sshd[60442]: Failed password for invalid user marcelo from 54.39.145.59 port 43836 ssh2 Jul 18 14:04:27 microserver sshd[61207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.145.59 user=mysql Jul 18 14:04:29 microserver sshd[61207]: Failed password for mysql from 54.39.145.59 port 42500 ssh2 Jul 18 14:18:00 microserver sshd[63277]: Invalid user elaine from 54.39.145.59 port 38482 Jul 18 14:18:00 microserver sshd[63277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.145.59 Jul 18 14:18:02 microserver sshd[63277]: Failed password for invalid user elaine from 54.39.145.59 port 38482 ssh2 Jul 18 14:22:34 microserver sshd[63958]: Invalid user oracle from 54.39.1	2019-07-18 19:10:44
113.21.99.208	attackbotsspam	Jul 18 03:12:54 mail sshd\[19123\]: Invalid user admin from 113.21.99.208 Jul 18 03:12:54 mail sshd\[19123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.21.99.208 Jul 18 03:12:56 mail sshd\[19123\]: Failed password for invalid user admin from 113.21.99.208 port 53398 ssh2	2019-07-18 18:51:45
222.186.52.123	attackbotsspam	2019-07-18T17:35:21.424527enmeeting.mahidol.ac.th sshd\[30396\]: User root from 222.186.52.123 not allowed because not listed in AllowUsers 2019-07-18T17:35:21.816963enmeeting.mahidol.ac.th sshd\[30396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.123 user=root 2019-07-18T17:35:24.540331enmeeting.mahidol.ac.th sshd\[30396\]: Failed password for invalid user root from 222.186.52.123 port 25038 ssh2 ...	2019-07-18 18:51:15
5.55.76.232	attackbots	Telnet Server BruteForce Attack	2019-07-18 19:27:44
54.36.130.88	attackbotsspam	no	2019-07-18 19:17:44
106.13.106.46	attackbots	Jul 18 06:59:22 plusreed sshd[32766]: Invalid user lao from 106.13.106.46 ...	2019-07-18 19:06:50
186.42.103.178	attack	Jul 18 13:09:53 vps647732 sshd[10939]: Failed password for root from 186.42.103.178 port 47660 ssh2 Jul 18 13:15:24 vps647732 sshd[11020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.42.103.178 ...	2019-07-18 19:24:48
51.68.177.171	attackspambots	Port scan on 1 port(s): 445	2019-07-18 19:34:33
158.69.242.237	attack	\[2019-07-18 06:59:15\] NOTICE\[20804\] chan_sip.c: Registration from '"576543"\' failed for '158.69.242.237:15524' - Wrong password \[2019-07-18 06:59:15\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-18T06:59:15.330-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="576543",SessionID="0x7f06f85ff978",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/158.69.242.237/15524",Challenge="6fcfa8ae",ReceivedChallenge="6fcfa8ae",ReceivedHash="3b5014d2cfd51f25807bece40023b2c2" \[2019-07-18 06:59:17\] NOTICE\[20804\] chan_sip.c: Registration from '"576543"\' failed for '158.69.242.237:5123' - Wrong password \[2019-07-18 06:59:17\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-18T06:59:17.297-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="576543",SessionID="0x7f06f823f758",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4	2019-07-18 19:08:45

最近上报的IP列表

105.196.133.130	147.64.209.162	58.30.139.107	172.249.43.38
151.66.112.50	214.173.26.237	38.244.162.187	148.212.208.219
113.204.16.94	125.116.101.45	108.54.107.122	207.213.156.232
87.66.95.135	13.108.69.215	181.169.198.203	36.157.171.177
14.250.166.91	49.0.19.192	214.10.14.25	165.255.66.27